SIMD Affine Transformation for GF(256) Cryptographic Arithmetic

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current hardware implementations of cryptographic algorithms like AES are inefficient in terms of performance and circuit area, and existing solutions do not fully address the complexities and bottlenecks associated with cryptographic arithmetic operations, particularly in software and hardware designs.

Innovation Solution

The development of instructions and processing logic for general-purpose GF(256) SIMD cryptographic arithmetic functionality, which includes decoding instructions for affine transformations, binary finite field multiplicative inverses, and modulus reductions, enabling efficient execution on processors with SIMD capabilities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If straightforward hardware implementations using lookup memories, truth tables, or binary decision diagrams are used for cryptographic operations, then the implementation is simple to understand and implement, but the circuit area and cost become excessive

Engineering Contradiction:
Improveease of implementationVSAvoidcircuit area
Core Design Contradiction:
Ease of manufactureVSArea of stationary object

Solution Approach 1:

The patent transforms cryptographic operations from traditional lookup-table-based approaches into polynomial arithmetic operations in GF(256). This parameter change from discrete lookup operations to algebraic operations enables more efficient hardware implementation with reduced circuit area while maintaining cryptographic security.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent replaces mechanical lookup memory access and truth table evaluation with algebraic polynomial multiplication and inversion in GF(256). This substitution eliminates the need for large lookup memories and complex truth tables, significantly reducing circuit area while preserving the cryptographic transformation functionality.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Area of stationary object

If finite fields isomorphic to GF(256) are used for cryptographic operations, then the circuit area efficiency is improved, but the processing speed becomes slower compared to straightforward hardware implementations

Engineering Contradiction:
Improvecircuit areaVSAvoidprocessing speed
Core Design Contradiction:
Area of stationary objectVSSpeed

Solution Approach 1:

The patent segments the cryptographic transformation into distinct polynomial arithmetic operations (multiplication, inversion, addition) in GF(256). This segmentation allows each operation to be optimized independently with dedicated hardware circuits, improving processing speed while maintaining area efficiency.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent pre-computes and stores polynomial coefficients and transformation parameters in compact lookup tables. This preliminary action allows the main cryptographic operations to proceed quickly using simple polynomial arithmetic, rather than performing complex calculations during the actual encryption/decryption process.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If software implementations of cryptographic algorithms are used, then the flexibility and adaptability are improved, but the performance is orders of magnitude slower than hardware implementations

Engineering Contradiction:
ImproveflexibilityVSAvoidperformance
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent creates a universal polynomial arithmetic framework in GF(256) that can implement multiple cryptographic operations (AES S-box, MixColumns, key expansion) using the same basic operations. This universality allows a single hardware or software implementation to handle various cryptographic functions with high performance.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent implements dynamic polynomial arithmetic operations that can adapt to different cryptographic requirements. The GF(256) operations can be configured for different modes and parameters, providing both hardware-like performance and software-like flexibility through programmable polynomial calculations.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS9960907B2Instruction for Performing SIMD affine transformation
Publication Date: 2018.05.01 INTEL CORP
  • US9960907B2 patent drawing
  • US9960907B2 patent drawing
  • US9960907B2 patent drawing

AI summary

Instructions and logic provide general purpose GF(28) SIMD cryptographic arithmetic functionality. Embodiments include a processor to decode an instruction for a SIMD affine transformation specifying a source data operand, a transformation matrix operand, and a translation vector. The transformation matrix is applied to each element of the source data operand, and the translation vector is applied to each of the transformed elements. A result of the instruction is stored in a SIMD destination register. Some embodiments also decode an instruction for a SIMD binary finite field multiplicative inverse to compute an inverse in a binary finite field modulo an irreducible polynomial for each element of the source data operand. Some embodiments also decode an instruction for a SIMD binary finite field multiplication specifying first and second source data operands to multiply each corresponding pair of elements of the first and second source data operand modulo an irreducible polynomial.